{"id":"ASB-A-157650336","details":"In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-157650336","CVE-2020-0450"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/system/nfc/+/914f67b39b6eed2515da93410df88f1162aaf831"}],"affected":[{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11-next:0"},{"fixed":"11-next:2020-11-01"}]}],"versions":["11-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6"],"severity":"High","spl":"2020-11-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-157650336-068feca8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc","function":"rw_i93_sm_format"},"deprecated":false,"digest":{"length":7777,"function_hash":"213542255988153905217280496995514215640"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc"},"deprecated":false,"digest":{"line_hashes":["154963762155651629960931236683129418141","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","201333054149423822752511375754527146868"],"threshold":0.9},"id":"ASB-A-157650336-b901e843"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-11-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8"],"severity":"High","spl":"2020-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8","target":{"file":"src/nfc/tags/rw_i93.c"},"deprecated":false,"digest":{"line_hashes":["236926422327120836637850561153966684488","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","105318739371176303332667308047799332828"],"threshold":0.9},"id":"ASB-A-157650336-663efd68"},{"id":"ASB-A-157650336-dbd9cced","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8","target":{"function":"rw_i93_sm_format","file":"src/nfc/tags/rw_i93.c"},"deprecated":false,"digest":{"function_hash":"66482794995716220559310371738825213319","length":7776}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-11-01"}]}],"versions":["8.1"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8","target":{"file":"src/nfc/tags/rw_i93.c"},"deprecated":false,"digest":{"line_hashes":["236926422327120836637850561153966684488","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","105318739371176303332667308047799332828"],"threshold":0.9},"id":"ASB-A-157650336-5a8355b9","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/nfc/tags/rw_i93.c","function":"rw_i93_sm_format"},"deprecated":false,"digest":{"function_hash":"66482794995716220559310371738825213319","length":7776},"id":"ASB-A-157650336-7cd7b2e7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8"}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/263e1127da9806b9ee3564d3520b6fc7435325c8"],"severity":"High","spl":"2020-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-11-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-11-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-157650336-cc325580","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc","function":"rw_i93_sm_format"},"deprecated":false,"digest":{"function_hash":"213542255988153905217280496995514215640","length":7777}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc"},"deprecated":false,"digest":{"line_hashes":["154963762155651629960931236683129418141","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","201333054149423822752511375754527146868"],"threshold":0.9},"id":"ASB-A-157650336-f256e576"}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-11-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2020-11-01","types":["ID"],"vanir_signatures":[{"target":{"function":"rw_i93_sm_format","file":"src/nfc/tags/rw_i93.cc"},"deprecated":false,"digest":{"length":7777,"function_hash":"213542255988153905217280496995514215640"},"id":"ASB-A-157650336-575da64f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6"},{"source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["154963762155651629960931236683129418141","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","201333054149423822752511375754527146868"]},"id":"ASB-A-157650336-9b8f37cc","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}},{"package":{"name":"platform/system/nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-11-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["154963762155651629960931236683129418141","333916888871439669055388686053626198732","67372517558228822731127329421284046779","270583259168256560006516691405503002495","49195663521341752171776885931041511099","218073476827453719293910530457084865506","201333054149423822752511375754527146868"],"threshold":0.9},"id":"ASB-A-157650336-21fcef17","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc"}},{"deprecated":false,"digest":{"function_hash":"213542255988153905217280496995514215640","length":7777},"id":"ASB-A-157650336-df1a667b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6","target":{"file":"src/nfc/tags/rw_i93.cc","function":"rw_i93_sm_format"}}],"fixes":["https://android.googlesource.com/platform/system/nfc/+/046b6676ad19472e2c87aa6cb35f6d42e5dcfcc6"],"severity":"High","spl":"2020-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157650336.json"}}],"schema_version":"1.9.0"}